$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa File: IgvH3pn5pSPPr03209pipIEt20E.roa (raw, json) Hash identifier: hfCKy+T1J1yceRrXtWyIUOv6dnYTULp4LqbSa8rE9m4= Subject key identifier: 22:0B:C7:DE:99:F9:A5:23:CF:AF:4D:F6:D3:DA:62:A4:81:2D:DB:41 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 029E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa Signing time: Fri 31 May 2024 01:39:49 +0000 ROA not before: Fri 31 May 2024 01:39:49 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 175.103.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:39:49 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=220BC7DE99F9A523CFAF4DF6D3DA62A4812DDB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:6e:e6:03:71:c7:5d:b9:4c:da:0d:b8:6f: 36:b8:be:78:7b:84:1f:6f:f1:71:b3:27:b5:19:b9: a2:f7:0a:65:a5:dc:f4:e3:4d:52:e6:3a:4f:64:37: 07:6f:6f:76:7c:94:31:49:a5:3b:22:96:a3:26:7c: d0:17:3f:7c:d3:cc:4f:a0:fe:44:7a:33:a4:76:c9: e4:6d:92:7f:8b:fc:78:44:cc:c7:70:4e:06:d1:b5: 97:bd:ef:d7:8e:f0:07:82:33:44:41:d0:0a:1d:ac: 26:ad:0d:2b:9b:5f:4f:17:b4:26:0d:78:d6:51:90: 21:c4:d3:7b:0f:2d:24:c0:d1:d4:05:87:bf:e2:85: de:a5:83:bf:2a:af:7f:c0:b1:1e:48:fa:c6:51:cb: f4:fd:5f:ad:44:fb:f0:52:d4:c9:7e:00:c4:5d:23: cc:ab:8e:68:e1:5e:dd:bc:26:d8:ee:62:60:f9:26: af:1f:51:82:d4:14:70:a1:b1:d0:c3:d2:96:2d:b8: 75:bb:78:a6:4f:74:3e:47:eb:ee:8e:e9:58:21:f8: a3:31:ed:c9:26:4c:fd:3d:bf:8d:98:3d:e4:af:f0: bf:af:80:f3:03:7d:05:6f:53:f1:9e:08:3b:18:c6: f3:21:3e:13:f8:fd:52:20:50:d4:53:9f:d6:64:5d: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0B:C7:DE:99:F9:A5:23:CF:AF:4D:F6:D3:DA:62:A4:81:2D:DB:41 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IgvH3pn5pSPPr03209pipIEt20E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.103.184.0/21 Signature Algorithm: sha256WithRSAEncryption 70:9f:2a:6c:31:58:12:93:39:cf:22:12:15:f5:52:9f:0e:3a: f1:ac:a3:e7:6e:71:1b:f2:34:f9:9d:de:5b:3e:bf:a0:87:20: fc:61:d7:db:a9:88:3f:d9:89:c5:80:99:9f:78:de:74:62:92: a1:b5:5e:d4:4d:c4:c7:96:46:fd:a8:c4:45:6b:91:55:49:b1: ce:c4:e3:67:ba:fc:84:4d:b0:ae:f7:3a:78:c7:cc:5e:31:42: 38:83:0b:7b:47:78:7a:06:a7:3e:35:8b:1a:83:97:16:24:63: 54:85:cd:c4:af:92:c4:3e:59:ad:8c:a8:0e:87:a4:35:9f:f3: 1e:d7:3f:65:e9:f3:ae:e4:e5:49:68:96:5b:37:7c:20:d5:3b: 6a:a6:33:6b:fb:f1:b7:ba:c1:23:70:2d:1c:a9:2a:ad:95:a8: 2f:48:fb:ef:96:20:33:b7:af:b1:25:f7:91:f0:77:94:57:27: dc:cb:a5:c4:e3:f4:fa:9e:2e:72:98:29:29:ab:32:b3:c0:4c: 6b:50:31:89:aa:5f:46:ca:33:23:c1:00:06:f2:b0:b6:a1:35: 43:f5:3a:22:8f:a1:09:97:d9:46:84:ed:81:a3:b3:6e:83:26: 7a:ec:dd:00:aa:4b:bd:1e:c4:f1:d1:79:6e:61:d0:d0:1b:ab: ff:60:30:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM5NDlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIyMEJDN0RFOTlGOUE1 MjNDRkFGNERGNkQzREE2MkE0ODEyRERCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSaG7mA3HHXblM2g24bza4vnh7hB9v8XGzJ7UZuaL3CmWl3PTj TVLmOk9kNwdvb3Z8lDFJpTsilqMmfNAXP3zTzE+g/kR6M6R2yeRtkn+L/HhEzMdw TgbRtZe979eO8AeCM0RB0AodrCatDSubX08XtCYNeNZRkCHE03sPLSTA0dQFh7/i hd6lg78qr3/AsR5I+sZRy/T9X61E+/BS1Ml+AMRdI8yrjmjhXt28JtjuYmD5Jq8f UYLUFHChsdDD0pYtuHW7eKZPdD5H6+6O6Vgh+KMx7ckmTP09v42YPeSv8L+vgPMD fQVvU/GeCDsYxvMhPhP4/VIgUNRTn9ZkXaMbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIgvH3pn5pSPPr03209pipIEt20EwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0lndkgzcG41cFNQUHIwMzIwOXBpcElFdDIwRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOvZ7gwDQYJKoZIhvcNAQELBQADggEBAHCfKmwxWBKTOc8iEhX1Up8OOvGs o+ducRvyNPmd3ls+v6CHIPxh19upiD/ZicWAmZ943nRikqG1XtRNxMeWRv2oxEVr kVVJsc7E42e6/IRNsK73OnjHzF4xQjiDC3tHeHoGpz41ixqDlxYkY1SFzcSvksQ+ Wa2MqA6HpDWf8x7XP2Xp867k5Ulolls3fCDVO2qmM2v78be6wSNwLRypKq2VqC9I +++WIDO3r7El95Hwd5RXJ9zLpcTj9PqeLnKYKSmrMrPATGtQMYmqX0bKMyPBAAby sLahNUP1OiKPoQmX2UaE7YGjs26DJnrs3QCqS70exPHReW5h0NAbq/9gMEc= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:06 2024 by rpki-client on console-ams.rpki-client.org